Creating a lifecycle policy

If you do not have the Yandex Cloud CLI yet, install and initialize it.

1. Set up policy rules and save them to a file named rules.json.

   Example of the contents of a file with rules, where:

   • description: Description of the policy rule.
   • tag_regexp: Docker image tag for filtering. Java regular expressions are supported. For example, the test.* regular expression retrieves all images with tags starting with test.
   • untagged: Flag to apply the rule to untagged Docker images.
   • expire_period: Time after which the lifecycle policy may apply to the Docker image. This parameter comes as a number followed by a unit of measurement: s, m, h, or d (seconds, minutes, hours, or days). expire_period must be a multiple of 24 hours.
   • retained_top: Number of Docker images that will not be deleted even if they match the rule.

   [
     {
       "description": "delete prod Docker images older than 60 days but retain 20 last ones",
       "tag_regexp": "prod",
       "expire_period": "60d",
       "retained_top": 20
     },
     {
       "description": "delete all test Docker images except 10 last ones",
       "tag_regexp": "test.*",
       "retained_top": 10
     },
     {
       "description": "delete all untagged Docker images older than 48 hours",
       "untagged": true,
       "expire_period": "48h"
     }
   ]
   

2. Create a lifecycle policy by running this command:

   yc container repository lifecycle-policy create \
     --repository-name crp3cpm16edq********/ubuntu \
     --name test-policy \
     --description "disabled lifecycle-policy for tests" \
     --rules ./rules.json
   

   Where:

   • --repository-name: Repository name.

   • --rules: Path to the policy description file.

   • --description: Lifecycle policy description. This is an optional setting.

   • --name: Policy name. This is an optional setting. The naming requirements are as follows:

     • Length: between 3 and 63 characters.
     • It can only contain lowercase Latin letters, numbers, and hyphens.
     • It must start with a letter and cannot end with a hyphen.

   Note

   By default, the policy is created with the DISABLED status. We do not recommend creating an active policy (with the --active flag) right away.

   Result:

   id: crp6lg1868p3********
   name: test-policy
   repository_id: crp3cpm16edq********
   ...
   - description: delete all untagged Docker images older than 48 hours
     expire_period: 172800s
     untagged: true
   

   The value of the expired_period parameter in the response is shown in seconds. This is a technical constraint; the format will be changed.

3. Make sure the policy has been created by running the following command:

   yc container repository lifecycle-policy list --repository-name crp3cpm16edq********/ubuntu
   

   Where --repository-name is the repository name.

   Result:

   +----------------------+-------------+----------------------+----------+---------------------+-------------------------------+
   |          ID          |    NAME     |    REPOSITORY ID     |  STATUS  |       CREATED       |          DESCRIPTION          |
   +----------------------+-------------+----------------------+----------+---------------------+-------------------------------+
   | crp6lg1868p3******** | test-policy | crp3cpm16edq******** | DISABLED | 2020-05-28 15:05:58 | disabled lifecycle-policy for |
   |                      |             |                      |          |                     | tests                         |
   +----------------------+-------------+----------------------+----------+---------------------+-------------------------------+
   

If you do not have Terraform yet, install it and configure the Yandex Cloud provider.

To manage infrastructure using Terraform under a service account or user accounts (a Yandex account, a federated account, or a local user), authenticate using the appropriate method.

1. In the configuration file, specify the properties of the resources you want to create:

   resource "yandex_container_repository_lifecycle_policy" "my_lifecycle_policy" {
     name          = "<policy_name>"
     status        = "<policy_status>"
     repository_id = "<repository_ID>"
   
     rule {
       description   = "<rule_description>"
       untagged      = true
       tag_regexp    = ".*"
       retained_top  = 1
       expire_period = "48h"
     }
   }
   

   Where:

   • name: Policy name.
   • status: Policy status. It can be either active or disabled.
   • repository_id: Repository ID.
   • rule: Policy rule section. It contains the following:
     • description: Rule description.
     • untagged: If this parameter is set to true, the rule applies to all Docker images that do not have a tag.
     • tag_regexp: Docker image tag for filtering. Java regular expressions are supported. For example, the test.* regular expression retrieves all images with tags starting with test.
     • retained_top: Number of Docker images that will not be deleted even if they match the lifecycle policy rules.
     • expire_period: Time after which the lifecycle policy applies to the Docker image. This parameter comes as a number followed by a unit of measurement: s, m, h, or d (seconds, minutes, hours, or days). expire_period must be a multiple of 24 hours.

   For more on the properties of the yandex_container_repository_lifecycle_policy resource, see this provider guide.

2. Create the resources:

   1. In the terminal, navigate to the configuration file directory.

   2. Make sure the configuration is correct using this command:

      terraform validate
      

      If the configuration is valid, you will get this message:

      Success! The configuration is valid.
      

   3. Run this command:

      terraform plan
      

      You will see a list of resources and their properties. No changes will be made at this step. Terraform will show any errors in the configuration.

   4. Apply the configuration changes:

      terraform apply
      

   5. Type yes and press Enter to confirm the changes.

This will create a lifecycle policy in the specified repository. You can check the new policy and its settings using the management console or this CLI command:

 yc container repository lifecycle-policy list --registry-id <registry_ID>

To create a lifecycle policy, use the Create method for the LifecyclePolicyService resource.